(a) To obtain a certificate to use for signing electronic orders for controlled substances, a registrant, coordinator, or person with power of attorney authorized to obtain a certificate for signing electronic orders for controlled substances for a registrant must complete the online enrollment process at www.deaecom.gov by:

(1) Completing the online identification proofing process;

(2) Providing a current listing of DEA registrations for which the individual has authority to sign controlled substances orders.

(3) Uploading all copies of the power of attorney forms authorized by the registrant, when applicable.

(4) Acknowledging that the applicant has read and understands the Subscriber Agreement and agrees to all terms contained in the Statement of Subscriber Obligations contained online.

(b) When the Certification Authority verifies the applicant's identity and employment and approves the application, it will send the applicant a one-time use reference number and access code, via separate channels, and information on how to use them. Using this information, the applicant must then electronically submit a request for certification of the public digital signature key. After the request is approved, the Certification Authority will provide the applicant with the signed public key certificate.

(c) Once the applicant has generated the key pair, the Certification Authority must prove that the user has possession of the key. For public keys, the corresponding private key must be used to sign the certificate request. Verification of the signature using the public key in the request will serve as proof of possession of the private key.